Cyber Threat Trends and Challenges TIE Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A small e-commerce company is concerned about the increasing sophistication of phishing attacks that use lookalike domains and legitimate services. The company has a limited IT budget and no dedicated security staff. Which measure is most practical to reduce the risk of employees falling for these attacks?

   • AHire a full-time security analyst to monitor and respond to phishing threats.
   • BImplement a security awareness training program that includes simulated phishing exercises and regular updates on current trends.
   • CPurchase an advanced email security gateway that uses machine learning to detect lookalike domains.
   • DBlock all emails from external domains that contain links or attachments.
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A software development company has seen a rise in supply-chain attacks where attackers compromise open-source libraries used in its products. The company wants to reduce this risk without slowing down development. Which measure is most effective?

   • AMaintain a software bill of materials (SBOM) and automatically scan for known vulnerabilities in dependencies before each release.
   • BBlock all use of open-source libraries and require developers to write all code in-house.
   • CRequire developers to manually review the source code of every open-source library before using it.
   • DConduct an annual penetration test on the final product to identify vulnerabilities introduced by dependencies.
   Reveal Solution Discussion Select an answer first
4. 33foundation · medium

   Why do evolving attack techniques pose a significant challenge to organizations' security defenses?

   • ABecause signature-based detection alone cannot keep up with rapidly changing malware and attack methods.
   • BBecause most attacks now use only zero-day exploits that are impossible to detect.
   • CBecause security patches are no longer released by vendors.
   • DBecause firewalls are no longer able to block any malicious traffic.
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A retail chain has experienced multiple point-of-sale (POS) malware infections over the past year. The infections originate from phishing emails sent to store managers. The company's security team is centralized at headquarters and has limited visibility into each store's network. Which measure would most effectively reduce the risk of POS malware while working within the existing IT structure?

   • AIncrease the frequency of antivirus signature updates on all POS terminals to every hour.
   • BDeploy a SIEM at headquarters and collect logs from all store firewalls and POS terminals.
   • CSend a monthly security newsletter to store managers with tips on identifying phishing emails.
   • DSegment the POS network from the corporate network and restrict internet access from POS terminals to only the payment processor's IP addresses.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A hospital's security team is concerned about the increasing number of ransomware attacks on healthcare organizations. The hospital relies on legacy medical devices that cannot be patched easily and are connected to the network for data exchange. The IT team has limited staff and cannot isolate every device. Which approach would best reduce the risk of ransomware spreading to these devices?

   • AIncrease the frequency of backups for the servers that the legacy devices communicate with.
   • BReplace all legacy devices with modern, patched equivalents as soon as possible.
   • CDisable all network connectivity on legacy devices and require manual data transfer via USB drives.
   • DDeploy network access control (NAC) to segment legacy devices into a separate VLAN with strict firewall rules that only allow necessary communication.
   Reveal Solution Discussion Select an answer first